CVE-2018-14802

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly check user-supplied comments which may allow for arbitrary remote code execution.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-10-01

Last modified

2024-09-16

Weaknesses

CWE-119, CWE-121

Affected products

• Frenic-ace (Fuji Electric)
• Frenic-eco (Fuji Electric)
• Frenic-mega (Fuji Electric)
• Frenic-mini C2 (Fuji Electric)
• Frenic-multi (Fuji Electric)
• Frenic Loader Of Frenic-mini C1 (Fuji Electric)
• Frenic Loader 3.3 Firmware (Fujielectric)

References

• http://www.securityfocus.com/bid/105408
• https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03